gen_keys

#!/bin/bash

# ENV
mkdir -p /home/$USER/.android-certs/
hash="-sha256"

# Cert keys
subject="/C=US/ST=California/L=Mountain View/O=Android/OU=Android/CN=Android/emailAddress=android@android.com"
for cert in $(cat _data/cert_keys.txt); do
    key_platform="/home/$USER/.android-certs/${cert}.pem"
    cert_file="$(pwd)/${cert}.x509.pem"
    if [ ! -f ${key_platform} ]; then
        openssl genrsa -f4 4096 > ${key_platform} 2>/dev/null
    fi
    if ! openssl x509 -checkend 86400 -noout -in ${cert_file} &> /dev/null; then
        openssl req -new -x509 ${hash} -key ${key_platform} -out ${cert_file} -days 10000 -subj "$subject"
        openssl pkcs8 -in ${key_platform} -topk8 -outform DER -out $(pwd)/${cert}.pk8 -nocrypt
    fi
done

# Apex keys
for apex in $(cat _data/apex_keys.txt); do
    subject="/C=US/ST=California/L=Mountain View/O=Android/OU=Android/CN=${apex}/emailAddress=android@android.com"
    key_apex="/home/$USER/.android-certs/${apex}.pem"
    cert_file="$(pwd)/${apex}.certificate.override.x509.pem"
    if [ ! -f ${key_apex} ]; then
        openssl genrsa -f4 4096 > ${key_apex} 2>/dev/null
    fi
    if ! openssl x509 -checkend 86400 -noout -in ${cert_file} &> /dev/null; then
        openssl req -new -x509 ${hash} -key ${key_apex} -out ${cert_file} -days 10000 -subj "$subject"
        openssl pkcs8 -in ${key_apex} -topk8 -outform DER -out $(pwd)/${apex}.certificate.override.pk8 -nocrypt
    fi
done

# Generate Makefiles
echo "// DO NOT EDIT THIS FILE MANUALLY" > Android.bp

for apex in $(cat _data/apex_keys.txt); do
    echo "" >> Android.bp
    echo "android_app_certificate {" >> Android.bp
    echo "    name: \"${apex}.certificate.override\"," >> Android.bp
    echo "    certificate: \"${apex}.certificate.override\"," >> Android.bp
    echo "}" >> Android.bp
done

echo "# DO NOT EDIT THIS FILE MANUALLY" > keys.mk
echo "" >> keys.mk
echo "PRODUCT_CERTIFICATE_OVERRIDES := \\" >> keys.mk
apexes=($(cat _data/apex_keys.txt))
last_index=$(( ${#apexes[@]} - 1 ))
for index in "${!apexes[@]}"; do
    apex=${apexes[$index]}
    if [ $index -eq $last_index ]; then
        echo "    ${apex}:${apex}.certificate.override" >> keys.mk
    else
        echo "    ${apex}:${apex}.certificate.override \\" >> keys.mk
    fi
done
echo "" >> keys.mk
echo "PRODUCT_DEFAULT_DEV_CERTIFICATE := vendor/droidx-priv/keys/releasekey" >> keys.mk

# Delete files and directories after key generation
rm -rf .git .gitignore _data README.md gen_keys